Exploit threats

454 threats

Severity	CVSS	Threat	Source	Published
Medium	–	Fresh LiteLLM Vulnerability Exploited Shortly After Disclosure Medium2026-04-29SecurityWeek The vulnerability allows attackers to read data from a LiteLLM proxy’s database and potentially modify it. The post Fresh LiteLLM Vulnerability Exploited Shortly After Disclosure appeared first on SecurityWeek . Exploit	SecurityWeek	2026-04-29
Medium	–	Atlona ATOMERX21 · Authenticated Command Injection Medium2026-04-29Exploit-DB RSS Feed Atlona ATOMERX21 - Authenticated Command Injection Exploit #local #exploit	Exploit-DB RSS Feed	2026-04-29
Critical	–	LangChain Core 1.2.4 · SSTI/RCE Critical2026-04-29Exploit-DB RSS Feed LangChain Core 1.2.4 - SSTI/RCE Exploit #web #rce #exploit	Exploit-DB RSS Feed	2026-04-29
High	–	Fedora · Local Privilege Escalation High2026-04-29Exploit-DB RSS Feed Fedora - Local Privilege Escalation Exploit #local #exploit	Exploit-DB RSS Feed	2026-04-29
Critical	–	Xibo CMS 4.3.0 · RCE via SSTI Critical2026-04-29Exploit-DB RSS Feed Xibo CMS 4.3.0 - RCE via SSTI Exploit #web #rce #exploit	Exploit-DB RSS Feed	2026-04-29
Medium	–	FacturaScripts 2025.43 · XSS Medium2026-04-29Exploit-DB RSS Feed FacturaScripts 2025.43 - XSS Exploit #web #xss #exploit	Exploit-DB RSS Feed	2026-04-29
Critical	–	JuzaWeb CMS 3.4.2 · Authenticated Remote Code Execution Critical2026-04-29Exploit-DB RSS Feed JuzaWeb CMS 3.4.2 - Authenticated Remote Code Execution Exploit #remote #web #exploit	Exploit-DB RSS Feed	2026-04-29
Critical	–	GUnet OpenEclass E-learning platform < 4.2 - Remote Code Execution (RCE) Critical2026-04-29Exploit-DB RSS Feed GUnet OpenEclass E-learning platform < 4.2 - Remote Code Execution (RCE) Exploit #remote #web #rce	Exploit-DB RSS Feed	2026-04-29
Medium	–	OpenKM 6.3.12 · Multiple Medium2026-04-29Exploit-DB RSS Feed OpenKM 6.3.12 - Multiple Exploit #web #exploit	Exploit-DB RSS Feed	2026-04-29
Critical	–	OpenWrt 23.05 · Authenticated Remote Code Execution (RCE) Critical2026-04-29Exploit-DB RSS Feed OpenWrt 23.05 - Authenticated Remote Code Execution (RCE) Exploit #remote #local #rce	Exploit-DB RSS Feed	2026-04-29
Medium	–	GeographicLib v2.5.1 · stack buffer overflow Medium2026-04-29Exploit-DB RSS Feed GeographicLib v2.5.1 - stack buffer overflow Exploit #web #exploit	Exploit-DB RSS Feed	2026-04-29
Medium	–	phpMyFAQ 4.0.16 · Improper Authorization Medium2026-04-29Exploit-DB RSS Feed phpMyFAQ 4.0.16 - Improper Authorization Exploit #web #php #exploit	Exploit-DB RSS Feed	2026-04-29
High	–	GNU InetUtils 2.6 · Telnetd Remote Privilege Escalation High2026-04-29Exploit-DB RSS Feed GNU InetUtils 2.6 - Telnetd Remote Privilege Escalation Exploit #remote #local #exploit	Exploit-DB RSS Feed	2026-04-29
Critical	–	Craft CMS 5.6.16 · RCE Critical2026-04-29Exploit-DB RSS Feed Craft CMS 5.6.16 - RCE Exploit #web #rce #exploit	Exploit-DB RSS Feed	2026-04-29
Medium	–	HAX CMS 24.x - Stored Cross-Site Scripting (XSS) Medium2026-04-29Exploit-DB RSS Feed HAX CMS 24.x - Stored Cross-Site Scripting (XSS) Exploit #web #xss #exploit	Exploit-DB RSS Feed	2026-04-29
Medium	–	Robinhood Vulnerability Exploited for Phishing Attacks Medium2026-04-28SecurityWeek Legitimate-looking emails coming from Robinhood systems lured recipients to phishing websites. The post Robinhood Vulnerability Exploited for Phishing Attacks appeared first on SecurityWeek . Exploit #web	SecurityWeek	2026-04-28
High	–	AI Can Autonomously Hack Cloud Systems With Minimal Oversight: Researchers High2026-04-23SecurityWeek Researchers at Palo Alto Networks have developed Zealot, a proof-of-concept multi-agent AI system capable of autonomously performing penetration testing tasks such as reconnaissance, exploitation, and data exfiltration. This demonstrates the potential for AI-driven autonomous hacking of cloud systems with minimal human oversight. However, this is currently a research demonstration and not an actively exploited threat in the wild. Exploit	SecurityWeek	2026-04-23
Critical	–	Can AI Attack the Cloud? Lessons From Building an Autonomous Cloud Offensive Multi-Agent System Critical2026-04-23Palo Alto Unit 42 Unit 42 has published an analysis detailing how multi-agent AI systems can autonomously conduct offensive operations against cloud environments. The report shares critical insights and lessons learned from building such an autonomous cloud offensive system. While the content highlights the potential for AI-driven attacks on cloud infrastructure, it does not specify particular vulnerabilities, affected versions, or known exploits in the wild. No patch or remediation guidance is provided, and the threat appears to be conceptual and research-focused rather than an actively exploited vulnerability. Exploit	Palo Alto Unit 42	2026-04-23
Low	–	Recent Microsoft Defender Vulnerability Exploited as Zero-Day Low2026-04-23SecurityWeek A recently disclosed vulnerability in Microsoft Defender has been exploited as a zero-day. This flaw enables attackers to access the Security Account Manager (SAM) database, extract NTLM hashes, and escalate privileges to System level. The vulnerability is reported with low severity and no known exploits in the wild have been confirmed. No patch or remediation details are provided in the available information. Exploit	SecurityWeek	2026-04-23
Medium	–	AVAST Antivirus 25.11 · Unquoted Service Path Medium2026-04-22Exploit-DB RSS Feed AVAST Antivirus 25.11 - Unquoted Service Path Exploit #local #exploit	Exploit-DB RSS Feed	2026-04-22

Page 10 of 23